This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json) Hash identifier: 4H/ISTyHwXhZLGE8cdbeW8MgICQNFJ+pIGJgZDygMSE= Subject key identifier: 03:32:3F:A2:83:A9:40:10:46:D8:0C:D3:29:CB:48:03:3C:F3:53:71 Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb Certificate serial: 019B3DFE8E0736C3429A14406FF8D46347BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft Manifest number: 01EE Signing time: Sat 20 Dec 2025 23:00:51 +0000 Manifest this update: Sat 20 Dec 2025 23:00:51 +0000 Manifest next update: Sun 21 Dec 2025 23:00:51 +0000 Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: Zr6SVGPFtQIM/iuw1aYOTki1U4DUn9JToGazMFPQcOU=) 2: wLmoD_8Og7x28Igym1-Hg5A410U.roa (hash: +Yzl9wN++dP4CtoCNIFtppZ8l53ff/sGGZfNPkEeKbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:8e:07:36:c3:42:9a:14:40:6f:f8:d4:63:47:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073848d8281be439e77750885b547a28152801bb Validity Not Before: Dec 20 23:00:51 2025 GMT Not After : Dec 21 23:00:51 2025 GMT Subject: CN=03323fa283a9401046d80cd329cb48033cf35371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:e4:b7:59:3b:6c:c6:25:f3:15:ff:ee:08: 57:b4:c9:cc:45:9e:12:08:d1:87:9b:60:24:3f:3e: 02:e0:63:92:ae:0f:52:1f:de:46:c1:5b:9c:9b:9b: f7:0f:71:4a:2c:51:13:e6:4e:e3:9b:8f:df:5b:5d: ba:71:14:b9:aa:db:62:23:5c:f8:cb:2a:e5:5d:d9: 33:49:77:2a:f0:08:17:1b:57:33:0d:39:2d:7e:a8: 39:8d:95:cb:d1:34:8d:b1:c9:c1:8c:b2:3e:27:c8: 5d:14:0f:85:c7:1a:ec:32:33:93:8d:ee:c9:26:a3: e5:79:76:10:0c:aa:c8:82:51:13:28:96:57:46:ce: ec:e5:15:60:63:ad:25:63:b7:33:b6:a5:b7:fb:54: f6:70:eb:a3:89:dc:93:65:d2:b7:41:39:1f:27:24: e8:e1:a5:29:eb:e0:55:14:18:75:2b:19:17:1b:15: 68:9d:21:dd:6b:64:5e:53:e2:1a:26:d0:14:48:32: 04:33:03:24:35:38:b3:df:49:c7:60:bc:34:8d:b0: 80:9a:83:17:5d:d0:f3:4a:29:90:83:06:c1:00:8b: dc:92:65:41:5f:62:25:7e:ec:dc:ab:3c:bd:1f:5f: ac:3b:00:2e:ed:2c:b8:c5:f1:f3:02:ee:7c:f2:23: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:32:3F:A2:83:A9:40:10:46:D8:0C:D3:29:CB:48:03:3C:F3:53:71 X509v3 Authority Key Identifier: keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:eb:c7:2e:5c:40:1f:da:d6:b0:e2:d5:f3:04:8f:37:e7:eb: 40:46:f1:12:b3:91:9e:68:53:6b:cd:81:b8:41:01:a4:70:7f: 94:5a:19:91:31:71:ee:6c:ef:62:f7:95:7c:a3:e3:7b:bf:aa: 94:06:a6:17:81:4a:cb:7e:0e:b9:2f:77:43:a0:39:bd:85:b8: c4:6d:58:f1:38:14:79:66:e9:f1:d8:0d:d8:52:84:43:3a:30: 44:60:1d:74:f1:ac:21:4e:5f:5e:67:92:18:8d:b6:39:34:b9: 28:fd:c0:4d:6c:a3:56:61:fb:70:7d:73:07:92:d8:57:96:50: 91:c6:6d:d9:c9:ec:74:1d:b3:0d:3f:64:0b:e9:3f:24:c9:58: 75:df:96:68:7d:48:b5:52:4e:a5:fe:8a:3a:b6:7d:4e:da:14: 72:9c:41:22:ad:e0:79:c8:9a:d9:5d:e3:7a:b8:6f:b9:79:3b: f0:5f:6b:cd:02:55:a3:79:a4:b3:9e:c3:01:50:19:3e:68:cb: f4:a7:99:b7:d1:fc:62:da:79:6b:21:5e:27:f0:9e:ad:cb:d1: 15:5f:d5:88:81:f5:11:9a:03:89:26:87:51:69:0f:f0:33:24: 13:05:51:d4:d6:a2:b1:ac:53:97:3d:2d:ce:c6:88:e3:9e:55: ed:43:77:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/o4HNsNCmhRAb/jUY0e7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy ODAxYmIwHhcNMjUxMjIwMjMwMDUxWhcNMjUxMjIxMjMwMDUxWjAzMTEwLwYDVQQD EygwMzMyM2ZhMjgzYTk0MDEwNDZkODBjZDMyOWNiNDgwMzNjZjM1MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi13kt1k7bMYl8xX/7ghXtMnMRZ4S CNGHm2AkPz4C4GOSrg9SH95GwVucm5v3D3FKLFET5k7jm4/fW126cRS5qttiI1z4 yyrlXdkzSXcq8AgXG1czDTktfqg5jZXL0TSNscnBjLI+J8hdFA+FxxrsMjOTje7J JqPleXYQDKrIglETKJZXRs7s5RVgY60lY7cztqW3+1T2cOujidyTZdK3QTkfJyTo 4aUp6+BVFBh1KxkXGxVonSHda2ReU+IaJtAUSDIEMwMkNTiz30nHYLw0jbCAmoMX XdDzSimQgwbBAIvckmVBX2Ilfuzcqzy9H1+sOwAu7Sy4xfHzAu588iOtQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMyP6KDqUAQRtgM0ynLSAM881NxMB8GA1UdIwQY MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5 LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOvHLlxA H9rWsOLV8wSPN+frQEbxErORnmhTa82BuEEBpHB/lFoZkTFx7mzvYveVfKPje7+q lAamF4FKy34OuS93Q6A5vYW4xG1Y8TgUeWbp8dgN2FKEQzowRGAddPGsIU5fXmeS GI22OTS5KP3ATWyjVmH7cH1zB5LYV5ZQkcZt2cnsdB2zDT9kC+k/JMlYdd+WaH1I tVJOpf6KOrZ9TtoUcpxBIq3gecia2V3jerhvuXk78F9rzQJVo3mks57DAVAZPmjL 9KeZt9H8Ytp5ayFeJ/CercvRFV/ViIH1EZoDiSaHUWkP8DMkEwVR1NaisaxTlz0t zsaI455V7UN3QQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:53:02 2025 by rpki-client